Post by kas on Jan 7, 2013 0:58:51 GMT -5
Sometimes the sites used in spam are victims whose sites have been compromised and used to redirect to spammer sites unknowingly.
Such as this case looks like:
See attachment to see what it actually looks like in email.
Link in spam email is: hxxp://donahecker.com/spouted.html?discount=f9e79d
An odd thing I noticed while selecting the text is in the "green plus cross" it says in green "BECDA"
Such as this case looks like:
Return-Path: <ly0001@web2.opanet.cz>
Received: from web2.opanet.cz (web2.opanet.cz. [213.155.226.252])
Date: Tue, 11 Dec 2012 20:03:24 -0000
From: "Craig Stewart" <Craig1973@web2.opanet.cz>
Subject: Craig Stewart sent you a direct message
Buy Quality Medicines Online
Click
Received: from web2.opanet.cz (web2.opanet.cz. [213.155.226.252])
Date: Tue, 11 Dec 2012 20:03:24 -0000
From: "Craig Stewart" <Craig1973@web2.opanet.cz>
Subject: Craig Stewart sent you a direct message
Buy Quality Medicines Online
Click
See attachment to see what it actually looks like in email.
Link in spam email is: hxxp://donahecker.com/spouted.html?discount=f9e79d
An odd thing I noticed while selecting the text is in the "green plus cross" it says in green "BECDA"
Attachments:
